Skip to content
Quest Training

Personal Data Protection Laws (PDPL & GDPR) Compliance Training Course

Translates the Saudi PDPL and the EU GDPR into practical compliance controls, covering lawful processing, data subject rights and daily operational processes.

DPGP · Data Privacy, Governance & ProtectionAll Levels#2562ClassroomEnglish , Arabic
Duration
5 Days
Download BrochureView Upcoming Dates

Free substitution at any time · 30+ days' notice: full refund minus 10%. Cancellation policy

Sectors:Data, Analytics & Digital TransformationCategories:Data Privacy, Governance & Protection

Course Overview

This advanced practical course provides a structured understanding of personal data protection requirements under the Saudi Personal Data Protection Law (PDPL) and the General Data Protection Regulation (GDPR), with emphasis on translating legal requirements into practical compliance controls and operational processes. The programme examines the core principles of personal data protection, lawful processing, data subject rights, consent, data retention, cross-border transfers, privacy notices, data processing agreements, breach management, and accountability. It also explores key similarities and differences between PDPL and GDPR and their implications for organizations operating across multiple jurisdictions. Participants will work through practical compliance scenarios covering data inventories, processing activities, privacy risks, contractual requirements, individual rights requests, international data transfers, and personal data incidents. The focus is on identifying compliance gaps and establishing practical measures to address them. The course also addresses organizational responsibilities, governance, documentation, compliance monitoring, third-party management, and privacy by design, enabling participants to develop a practical approach for maintaining ongoing compliance with applicable personal data protection requirements.

Learning Objectives

  • Analyse the fundamental principles and requirements of PDPL and GDPR.
  • Compare key similarities and differences between PDPL and GDPR.
  • Identify lawful bases and conditions for processing personal data.
  • Assess organizational responsibilities for protecting personal data.
  • Apply requirements relating to data subject rights and individual requests.
  • Evaluate privacy notices, consent mechanisms, and transparency requirements.
  • Assess data retention, minimization, purpose limitation, and accountability practices.
  • Apply requirements for data processing agreements and third-party relationships.
  • Evaluate cross-border data transfers and related compliance considerations.
  • Develop appropriate processes for managing personal data breaches and incidents.
  • Identify compliance gaps through structured privacy assessments and documentation reviews.
  • Develop a practical roadmap for strengthening PDPL and GDPR compliance.

Who Should Attend

This course is designed for Data Protection Officers, Privacy Officers, Privacy Managers, Compliance Professionals, Legal and Regulatory Specialists, Data Governance Professionals, and Information Security Managers. It is also suitable for Chief Data Officers, Chief Information Officers, Risk Managers, Internal Auditors, IT Managers, Procurement and Vendor Management Professionals, HR Managers, and business leaders responsible for personal data processing. The programme is particularly relevant to organizations operating in Saudi Arabia, the European Union, or across multiple jurisdictions where personal data may be collected, processed, stored, transferred, or shared internationally.

Learning Outcomes

  • Explain the core requirements and principles of PDPL and GDPR.
  • Distinguish between the principal compliance requirements under the two frameworks.
  • Determine appropriate legal grounds for personal data processing.
  • Assess organizational responsibilities and accountability for personal data protection.
  • Manage processes relating to data subject rights and individual requests.
  • Evaluate privacy notices, consent processes, and transparency controls.
  • Assess data retention, minimization, purpose limitation, and accountability practices.
  • Review data processing agreements and third-party privacy requirements.
  • Identify compliance considerations associated with cross-border data transfers.
  • Establish effective personal data breach identification, escalation, and response processes.
  • Conduct structured assessments to identify privacy compliance gaps.
  • Develop prioritized actions and an implementation roadmap for PDPL and GDPR compliance.

Course Outline

Day 1

PDPL & GDPR Foundations, Scope & Compliance Principles

  • Personal data protection and regulatory accountability.
  • Scope and applicability of PDPL and GDPR.
  • Key terminology and regulatory concepts.
  • Core principles of personal data protection.
  • Lawfulness, fairness, transparency, and purpose limitation.
  • Data minimization and accuracy.
  • Storage limitation and data retention.
  • Integrity, confidentiality, and accountability.
  • Organizational responsibilities and governance.
  • Practical Application: Map the applicability of PDPL and GDPR to selected organizational data processing activities and identify initial compliance obligations.
Day 2

Lawful Processing, Consent & Data Subject Rights

  • Legal bases for processing personal data.
  • Consent requirements and management.
  • Special categories and sensitive personal data considerations.
  • Transparency and privacy notice requirements.
  • Data subject rights and organizational responsibilities.
  • Access, correction, deletion, restriction, and objection considerations.
  • Request intake, verification, response, and documentation.
  • Handling complex or conflicting requests.
  • Accountability and evidence requirements.
  • Practical Application: Assess a series of personal data processing scenarios, determine appropriate legal grounds, and design a workflow for managing data subject requests.
Day 3

Data Governance, Contracts, Retention & Third-Party Compliance

  • Data inventories and records of processing activities.
  • Data ownership and accountability.
  • Data retention and secure disposal.
  • Privacy requirements in contracts and agreements.
  • Data processing agreements and third-party responsibilities.
  • Controller and processor relationships.
  • Supplier and service-provider privacy assessments.
  • Privacy by design and privacy considerations in projects.
  • Documentation and compliance evidence.
  • Practical Application: Review a simulated third-party data processing arrangement and identify contractual, governance, retention, and privacy control requirements.
Day 4

Cross-Border Transfers, Breach Management & Compliance Monitoring

  • Principles governing international data transfers.
  • Cross-border processing considerations under PDPL and GDPR.
  • Transfer risk assessment and organizational controls.
  • Personal data breach identification and classification.
  • Incident escalation and response responsibilities.
  • Investigation, documentation, and corrective actions.
  • Regulatory and stakeholder communication considerations.
  • Privacy compliance monitoring and internal assessments.
  • Evidence management and audit readiness.
  • Practical Application: Manage a simulated cross-border data incident from initial detection through risk assessment, escalation, response, documentation, and corrective action.
Day 5

PDPL & GDPR Compliance Programme and Implementation Roadmap

  • Building an integrated personal data protection compliance programme.
  • Comparing organizational gaps against PDPL and GDPR requirements.
  • Prioritizing compliance actions according to risk and business impact.
  • Developing policies, procedures, and operational controls.
  • Integrating privacy with security, risk, compliance, and data governance.
  • Third-party compliance and ongoing monitoring.
  • Privacy awareness and organizational training.
  • Compliance metrics, reporting, and management oversight.
  • Continuous improvement and regulatory readiness.
  • Final Workshop: Develop a practical PDPL and GDPR compliance roadmap covering governance, legal bases, data subject rights, data governance, contracts, retention, cross-border transfers, incident management, monitoring, priorities, and implementation actions.

Upcoming Dates

Selected date

Lisbon · 18 – 22 Jan 2027 · Classroom

Need more details?Chat with us on WhatsApp

CityDatesPrice per ParticipantEarly Bird
MadridScheduled
2 – 6 Nov 2026€5,400—
SelectDownload Brochure
MakkahScheduled
9 – 13 Nov 2026€4,200—
SelectDownload Brochure
ManamaScheduled
16 – 20 Nov 2026€4,700—
SelectDownload Brochure
JeddahScheduled
22 – 26 Nov 2026€4,200€3,780until 2 Nov
SelectDownload Brochure
MarbellaScheduled
23 – 27 Nov 2026€5,400€4,860until 2 Nov
SelectDownload Brochure
MilanScheduled
30 Nov – 4 Dec 2026€6,000€5,400until 9 Nov
SelectDownload Brochure
MarrakeshScheduled
30 Nov – 4 Dec 2026€4,300€3,870until 9 Nov
SelectDownload Brochure
MunichScheduled
7 – 11 Dec 2026€5,400€4,860until 16 Nov
SelectDownload Brochure
KigaliScheduled
7 – 11 Dec 2026€5,100€4,590until 16 Nov
SelectDownload Brochure
MuscatScheduled
14 – 18 Dec 2026€5,300€4,770until 23 Nov
SelectDownload Brochure
OnlineScheduled
20 – 24 Dec 2026€1,700€1,530until 30 Nov
SelectDownload Brochure
Kuala LumpurScheduled
28 Dec 2026 – 1 Jan 2027€4,400€3,960until 7 Dec
SelectDownload Brochure
ParisScheduled
28 Dec 2026 – 1 Jan 2027€5,700€5,130until 7 Dec
SelectDownload Brochure
RiyadhScheduled
4 – 8 Jan 2027€4,200€3,780until 14 Dec
SelectDownload Brochure
SalalahScheduled
11 – 15 Jan 2027€5,300€4,770until 21 Dec
SelectDownload Brochure
RomeScheduled
11 – 15 Jan 2027€5,800€5,220until 21 Dec
SelectDownload Brochure
LisbonScheduled
18 – 22 Jan 2027€5,400€4,860until 28 Dec
✓ SelectedDownload Brochure
ViennaScheduled
18 – 22 Jan 2027€5,700€5,130until 28 Dec
SelectDownload Brochure
AmmanScheduled
24 – 28 Jan 2027€3,100€2,790until 4 Jan
SelectDownload Brochure
LondonScheduled
1 – 5 Feb 2027€5,600€5,040until 11 Jan
SelectDownload Brochure
AmsterdamScheduled
1 – 5 Feb 2027€5,400€4,860until 11 Jan
SelectDownload Brochure
BarcelonaScheduled
8 – 12 Feb 2027€5,400€4,860until 18 Jan
SelectDownload Brochure
BerlinScheduled
15 – 19 Feb 2027€5,800€5,220until 25 Jan
SelectDownload Brochure
CairoScheduled
22 – 26 Feb 2027€3,300€2,970until 1 Feb
SelectDownload Brochure
MadinahScheduled
22 – 26 Feb 2027€4,200€3,780until 1 Feb
SelectDownload Brochure
DammamScheduled
1 – 5 Mar 2027€4,200€3,780until 8 Feb
SelectDownload Brochure
CasablancaScheduled
1 – 5 Mar 2027€4,300€3,870until 8 Feb
SelectDownload Brochure
DohaScheduled
8 – 12 Mar 2027€4,400€3,960until 15 Feb
SelectDownload Brochure
DubaiScheduled
14 – 18 Mar 2027€4,400€3,960until 22 Feb
SelectDownload Brochure
AbujaScheduled
15 – 19 Mar 2027€5,100€4,590until 22 Feb
SelectDownload Brochure

Available in: Istanbul · Dubai · London · Riyadh · Doha · Amsterdam

Related Courses

Ready to Elevate Your Team's Capabilities?

Speak with our advisors about upcoming programmes or a bespoke corporate training plan.

Download BrochureContact Our Team